Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/194b2ca9-b24d-3e64-80a7-47b57b54dc5c.roa
File:                     194b2ca9-b24d-3e64-80a7-47b57b54dc5c.roa (raw, json)
Hash identifier:          N6zTWH0+WsB/9R4OWdgcN/7aS/zEGrYhs6NJvG12KgA=
Subject key identifier:   1E:56:69:5E:96:9E:5D:79:84:F3:BD:0F:E2:F5:58:42:79:B5:32:2A
Certificate issuer:       /CN=bb6338e8-3b98-45c0-936a-f7532d14c16b
Certificate serial:       010D0C9F43285847213B0CA4131264CBE1AAD100
Authority key identifier: 34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/194b2ca9-b24d-3e64-80a7-47b57b54dc5c.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     19804
IP address blocks:        74.220.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:0c:a4:13:12:64:cb:e1:aa:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb6338e8-3b98-45c0-936a-f7532d14c16b
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=f2ec47b3-f335-4ee4-98cc-acf54c6356cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:2b:2d:bc:42:f5:b1:13:1e:98:61:2a:8b:
                    be:f5:8a:f2:4f:5b:06:18:cb:a5:4b:a2:f7:31:a7:
                    22:d3:88:38:5e:24:23:4e:3d:49:b3:91:cc:5d:d1:
                    e3:72:d5:a6:cc:c5:07:f8:84:7c:0e:9d:6e:29:6e:
                    9b:1a:07:7e:7b:08:db:4f:a3:50:ab:4b:64:0d:67:
                    9c:cd:e2:1a:16:45:db:4c:9d:62:1f:fc:56:9d:ea:
                    2a:ae:2d:19:da:fc:16:50:5d:4a:f4:f9:e8:75:fc:
                    5f:ac:d5:b1:e5:00:eb:eb:12:a0:f2:8a:99:ad:f0:
                    05:01:22:80:a4:f6:d2:f3:76:42:8b:30:f7:b8:21:
                    6e:9c:65:6d:f0:bd:88:80:ff:6a:f4:11:e5:2b:79:
                    f1:12:68:5d:d0:75:2a:0c:19:e6:33:7c:e2:e1:52:
                    32:aa:0f:07:61:4e:f8:31:6a:4d:22:ff:d3:c6:3c:
                    92:58:7e:e9:8c:00:df:4a:59:c2:59:b3:e8:08:3b:
                    f1:75:4a:a8:45:58:6a:cc:96:ea:eb:36:cf:63:2c:
                    21:3d:40:13:ec:2f:99:17:85:b3:ae:e8:b0:8f:c4:
                    ff:17:b1:a6:15:6b:b8:0b:83:4a:7e:7d:d8:f3:74:
                    63:a4:91:5c:6f:ec:cc:d4:67:23:13:02:f0:2a:ff:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:56:69:5E:96:9E:5D:79:84:F3:BD:0F:E2:F5:58:42:79:B5:32:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/194b2ca9-b24d-3e64-80a7-47b57b54dc5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl

            X509v3 Authority Key Identifier:
                keyid:34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.220.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:a9:af:0f:e6:11:30:c0:7f:9c:31:f6:e9:c2:9d:4a:ef:65:
         d2:99:29:aa:1a:b8:29:2d:a3:85:2b:32:64:01:19:61:0c:ca:
         ca:8c:46:bc:9c:d0:00:7c:8b:05:a4:ba:12:87:64:c9:ee:55:
         7e:79:e5:d0:4d:9e:f3:d5:dd:a2:25:a2:f2:94:e5:7a:69:7f:
         6b:d0:a7:8c:c1:93:31:23:fc:82:bf:33:12:71:d7:6f:c9:64:
         d9:79:f2:51:6b:ca:29:12:b6:08:86:1c:f4:c8:5c:48:e4:d3:
         aa:d3:5a:6a:98:25:99:5e:99:61:0b:b9:34:a0:e8:38:82:85:
         3d:fe:82:86:9b:2e:15:00:52:0b:05:66:87:37:df:64:c1:38:
         52:95:ec:15:97:91:3e:f9:e8:ab:40:69:d0:6d:75:09:f2:f5:
         94:0e:22:e0:5a:44:d6:d7:64:91:92:1b:32:29:b8:81:85:1e:
         4c:f0:2e:d1:c8:67:28:64:6e:d3:9b:bf:78:8f:8b:c2:33:a8:
         65:50:85:32:4d:18:fb:70:00:ab:b5:89:1a:0a:21:8b:d5:da:
         fb:6a:42:de:07:8a:94:a0:25:63:89:9a:d7:0a:ad:a7:3c:27:
         7a:d3:01:cc:4a:0a:d3:57:cc:57:54:a3:51:8d:aa:f4:d3:82:
         de:0d:77:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEchOwykExJky+Gq0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmI2MzM4ZTgtM2I5OC00NWMwLTkzNmEtZjc1MzJkMTRj
MTZiMB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk
ZjJlYzQ3YjMtZjMzNS00ZWU0LTk4Y2MtYWNmNTRjNjM1NmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmUrLbxC9bETHphhKou+9YryT1sGGMulS6L3
Maci04g4XiQjTj1Js5HMXdHjctWmzMUH+IR8Dp1uKW6bGgd+ewjbT6NQq0tkDWec
zeIaFkXbTJ1iH/xWneoqri0Z2vwWUF1K9PnodfxfrNWx5QDr6xKg8oqZrfAFASKA
pPbS83ZCizD3uCFunGVt8L2IgP9q9BHlK3nxEmhd0HUqDBnmM3zi4VIyqg8HYU74
MWpNIv/TxjySWH7pjADfSlnCWbPoCDvxdUqoRVhqzJbq6zbPYywhPUAT7C+ZF4Wz
ruiwj8T/F7GmFWu4C4NKfn3Y83RjpJFcb+zM1GcjEwLwKv/kpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB5WaV6Wnl15hPO9D+L1WEJ5tTIqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYz
MzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUzMmQxNGMxNmIvMTk0YjJjYTktYjI0ZC0z
ZTY0LTgwYTctNDdiNTdiNTRkYzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmI2MzM4ZTgtM2I5OC00NWMwLTkz
NmEtZjc1MzJkMTRjMTZiL2JiNjMzOGU4LTNiOTgtNDVjMC05MzZhLWY3NTMyZDE0
YzE2Yi5jcmwwHwYDVR0jBBgwFoAUNPbX9h2WrJ6QQudVuREQXgnNTIIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYzMzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUz
MmQxNGMxNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStx5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaprw/mETDAf5wx9unCnUrvZdKZKaoauCkto4UrMmQBGWEMysqMRryc
0AB8iwWkuhKHZMnuVX555dBNnvPV3aIlovKU5Xppf2vQp4zBkzEj/IK/MxJx12/J
ZNl58lFryikStgiGHPTIXEjk06rTWmqYJZlemWELuTSg6DiChT3+goabLhUAUgsF
Zoc332TBOFKV7BWXkT756KtAadBtdQny9ZQOIuBaRNbXZJGSGzIpuIGFHkzwLtHI
ZyhkbtObv3iPi8IzqGVQhTJNGPtwAKu1iRoKIYvV2vtqQt4HipSgJWOJmtcKrac8
J3rTAcxKCtNXzFdUo1GNqvTTgt4Nd/Q=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:06 2024 by rpki-client on console-ams.rpki-client.org